Broadband Tech > Security > Security > IE6 and Cookies

IE6 and Cookies

I use the low setting to block all 3rd party cookies. I permit cookies in my Internet and Trusted Zone, but I use a cookie manager that is part of my firewall.

However my big worry isn't cookies, its allowing scripting to sites, and only sites in my 'trusted' can run scripts.

In the advanced of the privacy tab just block all 3rd party, and permit the rest. The zone preferences will still be the rule when it comes to if you want cookies permitted or not.

I really don't even want 1st party cookies unless I allow it.

Also, I don't understand how the zone prefs will still rule when it comes to cookies. There is nothing at all about cookies in the custom level section of the zones. The only thing about cookies is in the privacy tab now.

Your right... I over looked that! I thought the setting was still there.

Maybe you could use the prompt options, and it might allow you to add them to the list of sites not permitted to put cookies on your system? It would be something to test?

reply to Lex Luthor
They eliminated the per Zone Cookies rules??? Arrggghhh!! I do not like that. And you have to enter the entire site??

I was hoping IE6 would have been an improvement in this area, but this sounds like a step back.

I assume by this posting IE6 is out and no longer a "public preview" (beta) now?

Full release.... Just check the MS forum

reply to R2
Yes, R2 it's final.

Ok...looks like I am the guinea pig.

Anyhow......looks like there is little reason to be alarmed from my testing. Seems to be working just as blitzen said, even though he didn't realize the cookies aren't in the zone settings.

I went to the privacy tab, clicked advanced, blocked all 1st party and 3rd party cookies. I allow session cookies, but that's not important here.

I did NOT add sites to the edit button on the privacy page.

I still have the sites I want cookies for in my trusted zone.

I deleted my cookies for staples.com.

Staples.com is in my trusted zone.

I went to staples and could browse items.

I deleted the cookies again and removed staples.com from my trusted zone.

I could not browse items now and with the new ie, you get a little icon on the bottom status bar showing that a cookie was blocked.

Seems to be working just fine. I guess maybe it assumes the trusted zone will want cookies?! I don't really know...it's weird, but works exactly as before.

I'll keep doing some more testing, but seems to be what I want.

I wonder what all the new settings do? I guess that give you some protection against bad cookies, but I'd just as well control the whole thing myself. I only have maybe 20 sites in my trusted zone, so it keeps the unecessary cookies way down. I guess I could have more "safe" cookies on my system if I used the new settings, but why?

Let me know what you guys find out.

BTW, seems very nice so far. No major changes, easy install, all working well..knock on wood.

reply to Lex Luthor
I downloaded ie 6 for the first time and I really like it. Esspecially the features added onto outlook express. Lex what setting do you have for the cookies to do that? High?

I suppose high might work, but I blew off the premade settings altogether and clicked privacy tab/advanced/override and then block/block.

Seems as if only sites in my trusted zone can put cookies on my system, just as with ie5.5. I still don't know why though since there are no cookie settings in the zones, but it does work.
[text was edited by author 2001-08-27 20:58:56]

reply to Lex Luthor
Thanks. Downloading now. I will take a look at this in more detail -- but maybe tomorrow...

reply to Lex Luthor
Looks like any site in your trusted zone can bypass the cookie filter

Although outside sites not in the trusted zone are subject to the cookie filter?

I need to do more tests on this... This is undocumented stuff here, and its not working like it said it would.

said by BlitzenZeus:

---

Looks like any site in your trusted zone can bypass the cookie filter

Although outside sites not in the trusted zone are subject to the cookie filter?

I need to do more tests on this... This is undocumented stuff here, and its not working like it said it would.

---

I agree with your findings.

reply to Lex Luthor
OK, I just downloaded. Now all my IE "e's" are powder blue. What an advancement...

I like the image toolbar! Cool.

The only new button up top is for the "Media" Explorer bar and there is a new "Lock the Toolbars" choice (??). "Radio" Toolbar is gone -- presumably replaced with the Media Explorer bar -- which I do not like. It wants to give me a cookie to "windowsmedia.com"...

I have to get home. I'll check out more later.

reply to Lex Luthor

• Enable Install on Demand (2)
• Enable third party Browser extensions
• Check for Signatures on downloaded programs

Anyone have any follow up?

I think we pretty much nailed this one.

Blitzen seems to have covered it all pretty clearly in the 2001-08-27 21:27 post.

As far as I'm concerned, it works just the way I'd like it to.

Thanks!

reply to BlitzenZeus

said by BlitzenZeus:

---

Looks like any site in your trusted zone can bypass the cookie filter

Although outside sites not in the trusted zone are subject to the cookie filter?

I need to do more tests on this... This is undocumented stuff here, and its not working like it said it would.

---

More info

• Internet zone: By default, this zone contains anything that is not on your computer or an intranet, or assigned to any other zone. The default security level for the Internet zone is Medium. You can change your privacy settings for the Internet zone on the Privacy tab in Internet Options. For more information, click Related Topics.
  
• Local intranet zone: This zone typically contains any addresses that don't require a proxy server, as defined by the system administrator. These include sites specified on the Connections tab, network paths (such as \\computername\foldername), and local intranet sites (typically addresses that don't contain periods, such as »internal). You can add sites to this zone. The default security level for the Local intranet zone is Medium, therefore, Internet Explorer will allow all cookies from Web sites in this zone to be saved on your computer and read by the Web site that created them.
  
• Trusted sites zone: This zone contains sites you trust—sites that you believe you can download or run files from without worrying about damage to your computer or data. You can assign sites to this zone. The default security level for the Trusted sites zone is Low, therefore, Internet Explorer will allow all cookies from Web sites in this zone to be saved on your computer and read by the Web site that created them.
  
• Restricted sites zone: This zone contains sites you don't trust—sites that you're not sure whether you can download or run files from without damage to your computer or data. You can assign sites to this zone. The default security level for the Restricted sites zone is High, therefore, Internet Explorer will block all cookies from Web sites in this zone.
  In addition, any files already on your local computer are assumed to be very safe, so minimal security settings are assigned to them. You cannot assign a folder or drive on your computer to a security zone.

reply to Lex Luthor

Re: IE6 and Cookies